Microsoft Defender for Endpoint

Microsoft has introduced several new removable storage management features in Defender for Endpoint (MDE). The latest release makes it easier for organizations to protect removable storage devices on Windows PCs. More specifically, Microsoft Defender for Endpoint helps IT admins to control how employees read, write, and execute specific files on removable storage. For instance, it’s…

Microsoft has announced that mobile network protection is now generally available in Defender for Endpoint. The feature first launched in public preview back in July to help organizations protect iOS and Android devices against Wi-Fi-related threats in enterprise networks. “As the world continues to make sense of the digital transformation, networks are becoming increasingly complex…

Microsoft announced several new security features and services at its Ignite 2022 conference this week. Specifically, the company introduced two new security solutions called Defender for DevOps and Defender Cloud Security Posture Management. Microsoft Defender for DevOps is a service that enables developers to detect and remediate code vulnerabilities during the software development life cycle….

Microsoft Defender for Endpoint will soon turn on tamper protection by default for all existing enterprise customers. The tamper protection feature prevents malicious apps from making unwanted changes to important security configuration settings on Windows, Windows Server, and macOS. Microsoft introduced tamper protection in its enterprise endpoint security solution back in 2019. Currently, the feature…

Microsoft has announced that Tamper Protection is now generally available for Defender for Endpoint customers on macOS devices. The new feature prevents malicious software and unauthorized users from modifying security settings that might put a system at risk. With Tamper Protection enabled, third-party apps won’t be able to uninstall Microsoft Defender for EndPoint from Mac…

Microsoft has warned customers about a new high-risk worm called “Raspberry Robin” that is infecting Windows PCs. The software giant has privately informed some Microsoft Defender for Endpoint users that the malware has been discovered in hundreds of enterprise networks across various industries (via Bleeping Computer). The Red Canary cybersecurity researchers first discovered Raspberry Robin…

Microsoft has released a new mobile network protection feature for its Microsoft Defender for Endpoint (MDE) solution. The new capability helps organizations protect Android and iOS devices against security threats originating from wireless connections. The mobile network protection feature is designed to offer protection against malicious attacks and bogus certificates targeting Wi-Fi networks in enterprise…

Microsoft Defender for Endpoint has released a new Contain feature that lets organizations isolate compromised unmanaged Windows devices from the network. The new capability will help IT admins to prevent attackers from carrying out malicious activities like lateral movement or data exfiltration. Once a device is contained, Microsoft Defender for Endpoint will block its communications…

Microsoft Defender for Endpoint is finally getting support for some older versions of Windows Server. Indeed, the Redmond giant has launched a revamped Microsoft Defender for Endpoint solution for Windows Server 2012 R2 and Windows Server 2016. Microsoft announced a public preview of its new Defender for Endpoint solution back in October 2021. The unified…

When approaching a rollout of Microsoft Defender for Endpoint (MDE) for your organization, it can be difficult to know where to start.  In my last article, MDE was explained at a high level: what it is and why you should care.  This time, we will get into the weeds of how to actually plan for…